Privacy policy
Last updated: 2026-10-25. Prepared for operator review before release.
Who operates Luo Chat
Luo Chat is an independent messaging service by Luo’s Creations. Contact creationslous@gmail.com for privacy requests. Never send passwords, recovery links, authentication tokens or private conversations to support.
Information we process
Account email, username, profile details, account identifiers and authentication records support registration and account recovery. Messages, memberships, reactions, files and delivery metadata support conversations and social features. Public posts are visible according to their audience settings. Service providers also process technical connection, security and error information.
Purposes and choices
We use information to provide the features you request, maintain accounts, prevent abuse and respond to support and privacy requests. Camera, microphone, notifications and device media access are optional and requested when needed. Device permission is not permission for unrelated tracking. Optional browser diagnostics are off until you opt in and can be withdrawn through Cookie settings.
Providers and international processing
Supabase provides authentication, database and media storage; Vercel hosts the web application. Browser, push and network providers handle technical delivery data. Optional diagnostics may use PostHog and Upstash. Selecting third-party GIF or sticker search may contact KLIPY or Wikimedia and reveal technical connection data to that provider. Providers may process data outside your country. We do not claim a particular transfer mechanism or legal basis has been approved for every jurisdiction.
Storage on your device
Session credentials, preferences and unsent text can use browser storage. Offline text, cached media and explicitly saved video drafts depend on your settings. Saved clip drafts are plaintext local data, not encrypted backups, and can be evicted by the browser. Drafts expire after the configured 7 or 30 days. Clear local storage before sharing a device. See the cookie policy for storage categories.
Access and security limitations
Server permissions restrict private data by account and conversation membership. Luo Chat is not represented as an end-to-end encrypted messenger. Recipients can download or copy content, and no screenshot-prevention guarantee is made. No service can promise absolute security.
Public profile images
Profile photos currently use a publicly readable avatar bucket. Anyone who has an image URL may retrieve that photo without signing in; do not upload a confidential image as your avatar. This differs from private chat, vault, story and social-media storage. Deleting or changing a photo cannot erase independent downloaded copies.
Retention and deletion
Service data is retained while needed for enabled features, account operation, abuse prevention and applicable obligations. Account and media deletion can require asynchronous cleanup; independently downloaded copies and some backups or security records may remain. We do not promise immediate backup erasure or a retention period that has not been verified. Local saved copies need separate device cleanup.
Your requests
Use the profile, account deletion and Storage & data controls, or contact support to request access, correction, export or deletion. We may verify account ownership without asking for your password. Depending on your location you may have additional rights, including objection, restriction and a complaint to your data-protection authority.
Children and sensitive information
The Luo Chat product minimum age is 12. Users aged 12–17 require verified parent or legal-guardian approval before registration. Minor registration remains unavailable while those safeguards are being built and independently reviewed. A birth date entered for the age screen is classified locally and not sent to the signup service. Children under 12 must not create accounts. Guardians may contact creationslous@gmail.com about privacy, access and deletion without sending passwords or children’s documents over chat. Applicable regional law may require additional protection.
Changes
Material changes will be reflected in this policy. The operator must finalize controller identity, address, applicable legal bases, retention schedules and international-transfer disclosures before a general public release.